Group Data Protection Officer (DPO)

We are looking for an experienced, independent-minded Group Data Protection Officer to lead privacy oversight across Altery Group. Reporting directly to the Group CEO, with direct access to the Board and senior management, you will be our centre of expertise for data protection. This role is not only strategic. It suits someone who enjoys combining senior-level advisory and challenge with hands-on delivery: running DPIAs, reviewing data-processing arrangements and working through complex regulatory questions yourself. You'll be comfortable acting independently, giving candid advice, and engaging confidently with regulators, executives and technical teams alike.

Responsibilities

• Act as the Group's independent advisor on data protection, guiding senior management and Group entities on their obligations under GDPR and other applicable privacy regimes.
• Own and maintain Group-wide data protection policies, standards and procedures, and support their consistent adoption across entities and jurisdictions.
• Determine when DPIAs are needed, and conduct and review them hands-on, including advising on residual risk and prior consultation with supervisory authorities.
• Advise on international data transfers (SCCs, UK IDTA and Addendum, transfer risk assessments) and on third-party and sub-processor arrangements.
• Monitor compliance across the Group, including oversight of Records of Processing Activities, data-flow maps, lawful-basis records and retention schedules, and track remediation of any gaps.
• Oversee data subject request and complaint handling, and advise on personal data breaches, including regulatory and data-subject notification decisions.
• Serve as the principal contact for data protection supervisory authorities and coordinate responses to regulatory enquiries.
• Promote privacy by design and by default across new products, technologies and business initiatives, including AI and data analytics.
• Brief senior management and the Board on material privacy risks, incidents and regulatory developments, and lead privacy awareness and training across the Group.

Requirements

Essential:

• Significant senior-level experience in data protection, privacy or a closely related regulatory function within a complex, international or regulated organisation.
• Deep, practical expertise in EU GDPR and UK GDPR, covering lawful bases, data subject rights, DPIAs, international transfers and breach requirements.
• Strong hands-on experience conducting and reviewing DPIAs and privacy risk assessments.
• A track record of building and running privacy governance frameworks, policies and controls.
• Experience managing data protection incidents, from investigation through remediation and regulatory notification.
• A clear understanding of the independence and conflict-of-interest requirements of the DPO role.
• Excellent communication and influencing skills with senior executives, regulators and both technical and non-technical audiences.
• Fluent professional English.

Nice to have:

• Knowledge of UAE Federal Decree-Law No. 45 of 2021 and DIFC Data Protection Law No. 5 of 2020, or of privacy regimes in the Middle East and El Salvador.
• Experience in fintech, payments, financial services or another regulated international business.
• Experience harmonising privacy standards across a multi-entity, multi-jurisdiction group.
• Familiarity with ISO/IEC 27001 and how information security connects with data protection.
• Experience advising on privacy in the context of AI, data analytics and third-party technology providers.
• Experience designing and delivering privacy training programmes.

Benefits

• Team and our Product: We are team players and we are passionate about our
• product and understand what we aim to achieve and the impact it will make.
• Growth Opportunities: You can Influence and shape our story while advancing your career.
• Flexibility: We always listen to our people and can be flexible with arrangements.
• Hybrid or Remote Working: We don't expect you to work from the office everyday, 2-3 times per week or remote.
• Local Market Perks: Enjoy insurance coverage, local perks, and beautiful offices.

Why to join us
We may not be perfect, but our strength lies in our resilience. Facing challenges with our expertise, positive attitude, and a supportive environment where everyone relies on one another gives us confidence in what we do. We empower our people to make decisions, explore, and experiment — micromanagement isn’t our style. We reward those who take on additional responsibilities and go the extra mile.

We are proud of how diverse and unique we are. We thrive on diverse views, love learning from one another, and believe that our differences fuel our curiosity